$ rpki-client -vvf rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft File: KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft (raw, json) Hash identifier: wCuY8NmB0eVKJOgCxmsxB3CB+eQT9IdycmesNSoocW0= Subject key identifier: 2F:86:50:23:3E:0C:3E:3E:F9:72:F4:C6:24:0A:BC:7C:06:FD:E1:94 Authority key identifier: 2A:E9:85:81:5A:10:DD:6D:04:52:3F:C8:1D:8D:AF:D7:26:BE:78:16 Certificate issuer: /CN=A911F536/serialNumber=2AE985815A10DD6D04523FC81D8DAFD726BE7816 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KumFgVoQ3W0EUj_IHY2v1ya-eBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft Manifest number: 13 Signing time: Wed 05 Feb 2025 06:24:37 +0000 Manifest this update: Wed 05 Feb 2025 06:24:37 +0000 Manifest next update: Wed 12 Feb 2025 06:24:37 +0000 Files and hashes: 1: KumFgVoQ3W0EUj_IHY2v1ya-eBY.crl (hash: XRMi5QIMaD6O1qRUG1P8JOvh02CuEWlTsjFMfo18ppE=) 2: F51AC6A6C99A11EFB5D4B020C4F9AE02.roa (hash: fGNbEo2HZuTyhLS2iozgIgHjOEWzYtgGTZax02Zo+d8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.crl rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KumFgVoQ3W0EUj_IHY2v1ya-eBY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:24:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F536 Validity Not Before: Feb 5 06:24:37 2025 GMT Not After : Feb 12 06:24:37 2025 GMT Subject: CN=67a30425-40f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:86:ad:dd:7c:99:89:84:25:bb:ef:54:a6:39: 3d:14:ec:f5:ba:b3:20:95:23:9c:5a:93:6f:7a:72: 7f:35:d0:c1:31:43:f6:5b:d5:f3:b9:a5:f7:b9:3a: 26:f6:b8:cc:f1:0c:a4:04:b9:b8:3a:04:62:ac:92: 6f:17:68:eb:0e:b0:5a:cd:7f:78:bc:1f:d1:2b:e9: 74:15:8e:cd:88:85:b6:05:56:1e:e9:3b:9f:8f:87: db:81:bc:24:50:12:4a:f0:bd:ae:d9:45:c3:62:7f: ee:0d:97:39:9d:32:38:72:d8:18:fd:ed:25:ff:ab: 45:2a:71:de:d3:e1:05:58:40:bd:14:f5:44:19:cb: 6a:f1:53:8d:fb:5c:a6:41:54:f8:ab:86:49:35:98: 7f:39:76:c4:0a:0c:50:78:16:57:10:5d:1f:09:6d: 3e:54:4b:bf:7c:16:cf:06:07:be:7f:2d:14:ed:67: c8:31:28:56:56:4d:3b:bf:19:f8:53:c6:69:e1:2d: a9:91:43:6d:2b:02:18:92:78:b4:69:10:c9:34:c7: 77:eb:4e:65:78:c9:57:19:84:3a:58:cb:34:84:7e: c6:ed:a1:7f:2f:77:e8:86:71:e7:fe:6f:29:c8:8a: 6a:90:1c:80:99:e6:a5:c2:7f:e2:e4:bf:d5:7f:4c: df:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:86:50:23:3E:0C:3E:3E:F9:72:F4:C6:24:0A:BC:7C:06:FD:E1:94 X509v3 Authority Key Identifier: keyid:2A:E9:85:81:5A:10:DD:6D:04:52:3F:C8:1D:8D:AF:D7:26:BE:78:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KumFgVoQ3W0EUj_IHY2v1ya-eBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:99:a6:b4:f4:a6:1d:68:7c:da:7f:b9:7e:09:c4:4e:e6:27: 0a:21:c1:fa:02:7d:db:98:f1:f1:b8:68:14:93:20:31:7b:04: 9b:49:b5:bd:f7:eb:da:8b:63:7a:b1:c5:6e:87:cf:d4:d5:fa: f4:07:25:b4:ad:37:75:5b:6e:ce:15:83:93:1c:3c:c4:6a:b7: 65:5f:41:2b:de:84:44:66:b6:c4:8c:b2:a0:a3:4f:01:2f:a9: b3:80:81:03:a2:1d:d9:67:be:5b:ba:45:b3:e0:38:9c:09:88: f5:65:e1:dd:b5:f0:3c:5c:f7:e9:e2:12:f2:65:cc:3c:cf:d8: ca:c3:d4:d8:17:d0:ba:00:68:17:e7:0b:ec:03:30:d8:e1:34: cb:5e:f2:f6:20:c3:91:9f:00:51:b9:69:6b:3b:50:9b:aa:d2: 67:70:79:39:a7:2f:81:4f:83:13:f4:1d:ea:b4:30:ce:69:d4: 0d:18:7f:70:a7:13:7a:0f:28:1d:77:1e:d3:ac:25:0f:55:78: f1:83:71:b5:30:8e:94:2b:e3:c1:53:8f:0d:49:d3:b8:db:42: e1:54:7b:cd:b5:d1:3e:e3:7d:6a:c5:b3:5d:15:17:8a:16:a7: 16:b9:c1:31:00:4a:73:e3:4a:75:e4:d3:58:32:4f:66:d6:3b: 69:ec:4d:4f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RjUzNjExMC8GA1UEBRMoMkFFOTg1ODE1QTEwREQ2RDA0NTIzRkM4MUQ4REFGRDcy NkJFNzgxNjAeFw0yNTAyMDUwNjI0MzdaFw0yNTAyMTIwNjI0MzdaMBgxFjAUBgNV BAMTDTY3YTMwNDI1LTQwZjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCthq3dfJmJhCW771SmOT0U7PW6syCVI5xak296cn810MExQ/Zb1fO5pfe5Oib2 uMzxDKQEubg6BGKskm8XaOsOsFrNf3i8H9Er6XQVjs2IhbYFVh7pO5+Ph9uBvCRQ Ekrwva7ZRcNif+4NlzmdMjhy2Bj97SX/q0Uqcd7T4QVYQL0U9UQZy2rxU437XKZB VPirhkk1mH85dsQKDFB4FlcQXR8JbT5US798Fs8GB75/LRTtZ8gxKFZWTTu/GfhT xmnhLamRQ20rAhiSeLRpEMk0x3frTmV4yVcZhDpYyzSEfsbtoX8vd+iGcef+bynI imqQHICZ5qXCf+Lkv9V/TN99AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUL4ZQIz4M Pj75cvTGJAq8fAb94ZQwHwYDVR0jBBgwFoAUKumFgVoQ3W0EUj/IHY2v1ya+eBYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGNTM2LzlBODZEQkQwQzk5 QTExRUZCNENFRUYxRUM0RjlBRTAyL0t1bUZnVm9RM1cwRVVqX0lIWTJ2MXlhLWVC WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvS3VtRmdWb1EzVzBFVWpfSUhZMnYxeWEtZUJZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFG NTM2LzlBODZEQkQwQzk5QTExRUZCNENFRUYxRUM0RjlBRTAyL0t1bUZnVm9RM1cw RVVqX0lIWTJ2MXlhLWVCWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIeZprT0ph1ofNp/uX4JxE7mJwohwfoCfduY8fG4aBSTIDF7BJtJtb33 69qLY3qxxW6Hz9TV+vQHJbStN3Vbbs4Vg5McPMRqt2VfQSvehERmtsSMsqCjTwEv qbOAgQOiHdlnvlu6RbPgOJwJiPVl4d218Dxc9+niEvJlzDzP2MrD1NgX0LoAaBfn C+wDMNjhNMte8vYgw5GfAFG5aWs7UJuq0mdweTmnL4FPgxP0Heq0MM5p1A0Yf3Cn E3oPKB13HtOsJQ9VePGDcbUwjpQr48FTjw1J07jbQuFUe8210T7jfWrFs10VF4oW pxa5wTEASnPjSnXk01gyT2bWO2nsTU8= -----END CERTIFICATE-----Generated at Wed Feb 5 20:12:28 2025 by rpki-client